Privacy-Preserving Authentication Protocol for Wireless Body Area Networks in Healthcare Applications

Area of Science:

• Mobile healthcare
• Wireless Body Area Networks (WBANs)
• Cybersecurity in healthcare

Background:

• Mobile healthcare services leverage Wireless Body Area Networks (WBANs) for remote patient data collection and diagnosis.
• Existing authentication protocols in WBANs are vulnerable to tracing attacks due to repeated patient identifiers, compromising privacy.
• Ensuring simultaneous security and privacy is critical for sensitive healthcare data.

Purpose of the Study:

• To propose a novel, privacy-preserving authentication protocol for WBANs in healthcare services.
• To address the vulnerability of existing protocols to tracing attacks and enhance patient privacy.
• To develop a lightweight protocol suitable for resource-constrained WBAN environments.

Main Methods:

• The proposed protocol utilizes lightweight cryptographic operations: one-way hash functions and exclusive-OR operations.
• Formal security analysis was conducted using BAN logic and the ProVerif tool for rigorous validation.
• Comparative analysis with existing protocols was performed to evaluate performance and features.

Main Results:

• The proposed protocol effectively prevents tracing attacks by avoiding the use of static patient identifiers.
• Formal security proofs confirm the protocol's robustness against various security threats.
• The protocol demonstrates superior privacy and security features compared to existing solutions.

Conclusions:

• The developed protocol offers enhanced privacy and security for mobile healthcare services utilizing WBANs.
• Its reliance on lightweight operations ensures suitable computational and communicational efficiency.
• This contributes to more secure and private remote healthcare data management.